by buried under 419s
Sat Feb 26, 2011 12:49 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 26 Feb 2011 01:36:44 -0800
Received: from nm3-vm1.bullet.mail.sp2.yahoo.com ([98.139.90.231])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1PtGZw-0007yF-1W
for ; Sat, 26 Feb 2011 01:36:44 -0800
Received: from [98.139.91.68] by nm3.bullet.mail.sp2.yahoo.com with NNFMP; 26 Feb 2011 09:36:40 -0000
Received: from [98.139.91.58] by tm8.bullet.mail.sp2.yahoo.com with NNFMP; 26 Feb 2011 09:36:40 -0000
Received: from [127.0.0.1] by omp1058.mail.sp2.yahoo.com with NNFMP; 26 Feb 2011 09:36:40 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 23787 invoked by uid 60001); 26 Feb 2011 09:36:40 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1298713000; bh=X9JAqPnhKyH5ASPZpC6kKZI+dMongdfKrfNA2Asxga0=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=BmKviXBey6P/I9M75C8PiIIlqOKv1I6dbyN6itd0J7Y+tQ4ROsXS8d+MFi/Fr6jbPrNQmq33DP6EC2DOiOrdUEwdLgKnrcIqDD7wIx30wpFZ9VbAFzQz9yuR2JI6EdfMCclwRjSbbXev1sbihtDYSHXnvzNUF7JkR2enSD8jA+0=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=NRL41hqYNexBKk8zApbJ5s7ZeDqKWhOmMamTr0aarSY8oGyyVCAs0bLCswCPxofe4s3tVQU0I/iy1hWwmKA5dnk6XJJhZNpE8iOg1DwsLBGqnlVil9Upa+bEVgpn5wETk2PpKYFmYYi3jwH3LKOnasxkTWutG9VYPU5e+ALXt2I=;
Message-ID: <[email protected]>
X-YMail-OSG: zPwZrwkVM1kgyhHncEGUPfXbZUiJi6GziskSvxAWP9G1JUC
Received: from [41.71.148.243] by web180616.mail.sp1.yahoo.com via HTTP; Sat, 26 Feb 2011 01:36:40 PST
X-Mailer: YahooMailClassic/11.4.20 YahooMailWebService/0.8.109.292656
Date: Sat, 26 Feb 2011 01:36:40 -0800 (PST)
From: Nichole Asha <[email protected]>
Reply-To: [email protected]
Subject: CONTACT FEDEX FOR YOUR TRACKING NUMBER
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-685926096-1298713000=:15141"
X-Spam-Subject: ***SPAM*** CONTACT FEDEX FOR YOUR TRACKING NUMBER
X-Spam-Status: Yes, score=10.8
X-Spam-Score: 108
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Brother, How are you today? I am writing to inform you
that I have Paid the fee for your Draft which has been with me for a long
time. Mr. Johnson Yayi the Director Bank of Africa told me that before the
draft will get to your hand that it will expire. We agreed to convect the
$1,200,000.00 USD In Cash. However, your [...]
Content analysis details: (10.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[98.139.90.231 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is freemail
(officefil-----1994[at]att.net)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (officefil-----1994[at]att.net)
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5704]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FILL_THIS_FORM Fill in a form with personal information
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.8 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.0 MONEY_FORM Lots of money if you fill out a form
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.5 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
--0-685926096-1298713000=:15141
Content-Type: text/plain; charset=us-ascii
Dear Brother,
How are you today? I am writing to inform you that I have Paid the fee for your Draft which has been with me for a long time. Mr. Johnson Yayi the Director
Bank of Africa told me that before the draft will get to your hand that it will expire. We agreed to convect the $1,200,000.00 USD In Cash. However, your
bank draft worth $1,200,000.00 USD is now in cash in a trunk box.
The cash is now with Courier. In fact I thank God very much for all the movement I made, every thing went successful. Our agreement with the Courier they
promised that your consignment will leave this Country on or before 5 days from now, But the Director of the Courier said that they need your information's
to enable them locate you immediately on their arrived. Then the only fee you will send to them is just for the security Keeping which is just $105, and
nothing more then the package will be deliver to your address.
Contact them with below infos.
ATTN:DR Jude Anderson
Tel.: +234 80 2205 2777
Email: ( [email protected] )
Send them you information such as.
Full Name,
Your current mailing address
Your Direct mobile number.
Note:the FEDEX courier company did not know the content of the box as i register it as an African cotton and make sure you did not disclose the content to
them.
Regards.
Nichol Asha
Envelope-to:
Delivery-date: Sat, 26 Feb 2011 01:36:44 -0800
Received: from nm3-vm1.bullet.mail.sp2.yahoo.com ([98.139.90.231])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1PtGZw-0007yF-1W
for ; Sat, 26 Feb 2011 01:36:44 -0800
Received: from [98.139.91.68] by nm3.bullet.mail.sp2.yahoo.com with NNFMP; 26 Feb 2011 09:36:40 -0000
Received: from [98.139.91.58] by tm8.bullet.mail.sp2.yahoo.com with NNFMP; 26 Feb 2011 09:36:40 -0000
Received: from [127.0.0.1] by omp1058.mail.sp2.yahoo.com with NNFMP; 26 Feb 2011 09:36:40 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 23787 invoked by uid 60001); 26 Feb 2011 09:36:40 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1298713000; bh=X9JAqPnhKyH5ASPZpC6kKZI+dMongdfKrfNA2Asxga0=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=BmKviXBey6P/I9M75C8PiIIlqOKv1I6dbyN6itd0J7Y+tQ4ROsXS8d+MFi/Fr6jbPrNQmq33DP6EC2DOiOrdUEwdLgKnrcIqDD7wIx30wpFZ9VbAFzQz9yuR2JI6EdfMCclwRjSbbXev1sbihtDYSHXnvzNUF7JkR2enSD8jA+0=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=NRL41hqYNexBKk8zApbJ5s7ZeDqKWhOmMamTr0aarSY8oGyyVCAs0bLCswCPxofe4s3tVQU0I/iy1hWwmKA5dnk6XJJhZNpE8iOg1DwsLBGqnlVil9Upa+bEVgpn5wETk2PpKYFmYYi3jwH3LKOnasxkTWutG9VYPU5e+ALXt2I=;
Message-ID: <[email protected]>
X-YMail-OSG: zPwZrwkVM1kgyhHncEGUPfXbZUiJi6GziskSvxAWP9G1JUC
Received: from [41.71.148.243] by web180616.mail.sp1.yahoo.com via HTTP; Sat, 26 Feb 2011 01:36:40 PST
X-Mailer: YahooMailClassic/11.4.20 YahooMailWebService/0.8.109.292656
Date: Sat, 26 Feb 2011 01:36:40 -0800 (PST)
From: Nichole Asha <[email protected]>
Reply-To: [email protected]
Subject: CONTACT FEDEX FOR YOUR TRACKING NUMBER
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-685926096-1298713000=:15141"
X-Spam-Subject: ***SPAM*** CONTACT FEDEX FOR YOUR TRACKING NUMBER
X-Spam-Status: Yes, score=10.8
X-Spam-Score: 108
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Brother, How are you today? I am writing to inform you
that I have Paid the fee for your Draft which has been with me for a long
time. Mr. Johnson Yayi the Director Bank of Africa told me that before the
draft will get to your hand that it will expire. We agreed to convect the
$1,200,000.00 USD In Cash. However, your [...]
Content analysis details: (10.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[98.139.90.231 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is freemail
(officefil-----1994[at]att.net)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (officefil-----1994[at]att.net)
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5704]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FILL_THIS_FORM Fill in a form with personal information
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.8 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.0 MONEY_FORM Lots of money if you fill out a form
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.5 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
--0-685926096-1298713000=:15141
Content-Type: text/plain; charset=us-ascii
Dear Brother,
How are you today? I am writing to inform you that I have Paid the fee for your Draft which has been with me for a long time. Mr. Johnson Yayi the Director
Bank of Africa told me that before the draft will get to your hand that it will expire. We agreed to convect the $1,200,000.00 USD In Cash. However, your
bank draft worth $1,200,000.00 USD is now in cash in a trunk box.
The cash is now with Courier. In fact I thank God very much for all the movement I made, every thing went successful. Our agreement with the Courier they
promised that your consignment will leave this Country on or before 5 days from now, But the Director of the Courier said that they need your information's
to enable them locate you immediately on their arrived. Then the only fee you will send to them is just for the security Keeping which is just $105, and
nothing more then the package will be deliver to your address.
Contact them with below infos.
ATTN:DR Jude Anderson
Tel.: +234 80 2205 2777
Email: ( [email protected] )
Send them you information such as.
Full Name,
Your current mailing address
Your Direct mobile number.
Note:the FEDEX courier company did not know the content of the box as i register it as an African cotton and make sure you did not disclose the content to
them.
Regards.
Nichol Asha
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces